Skip to content
OpenAdvisories

Vendor

networknt

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.4

    Networknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password

    Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated users. Attackers can send a Basic Authorization header with a known username an…